fix authorize url